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ABSTRACT : 

Techniques for determining a safe recovery time value after a failure of a first node in a 
computer system are described. According to the techniques, every node in a multi-node parallel 
database system maintains a logical clock for generating timestamps . The logical clocks are 
synchronized by attaching a current timestamp to every message that is sent by a node. When a 
node receives an incoming timestamp that is greater than the value indicated by the associated 
logical clock, it sets the associated logical clock forward to at least the value of the 
timestamp. When a node fails, a recovery node calculates a "safe" logical clock value to use in 
recovering the crashed node. In calculating the "safe" logical clock value, the recovery node 
searches specific areas of the database to locate and recover a most recent timestamp value 
associated with the crashed node. The recovery node then compares its current logical clock 
time value with the most recent crash node timestamp value to determine which timestamp is most 
recent. If the most recent crash node timestamp value is more recent than the recovery node's 
current logical clock time value, the recovery node's logical clock is updated to be at least 
as recent as the most recent crash node timestamp value. The recovery node then recovers the 
crashed node as its logical clock is guaranteed to be at least as recent as any timestamp value 
that was previously written to the database by the crashed node prior to failure. 
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